Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gd55pLmOb1Wil-qky_OOdiELmEA.roa
File: gd55pLmOb1Wil-qky_OOdiELmEA.roa (raw, json)
Hash identifier: GbACKgJ2xs44p2VoolUC2+M6SLVINeea4pjzBz0Rhss=
Subject key identifier: 81:DE:79:A4:B9:8E:6F:55:A2:97:EA:A4:CB:F3:8E:76:21:0B:98:40
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019A3010925F832C3503CF35FC70D07F57F1
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gd55pLmOb1Wil-qky_OOdiELmEA.roa
Signing time: Wed 29 Oct 2025 13:03:03 +0000
ROA not before: Wed 29 Oct 2025 13:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.168.0/23 maxlen: 24
94.74.190.0/24 maxlen: 24
109.203.176.0/21 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:10:92:5f:83:2c:35:03:cf:35:fc:70:d0:7f:57:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 29 13:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81de79a4b98e6f55a297eaa4cbf38e76210b9840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:1f:36:59:a5:85:ce:e7:ce:60:c4:38:97:
1e:19:b8:e7:ec:f1:d3:6f:c3:63:dd:d3:31:1b:0c:
09:79:2b:9c:07:ea:5d:1b:d4:4f:e1:af:e1:da:7d:
8a:c4:8c:45:8c:6a:08:4c:18:ad:e7:35:be:52:91:
68:48:dc:69:52:95:76:15:47:7c:19:72:33:cd:e1:
51:95:1b:72:f0:4c:f9:20:67:f5:04:3c:21:ec:37:
b5:e3:bf:f2:9f:80:ec:14:7a:b1:d1:48:44:92:dc:
3d:cc:42:5b:b4:cb:1d:7b:fc:f7:f3:c3:c1:58:42:
db:af:72:b7:53:2e:f0:23:64:7e:a8:21:fb:37:e1:
10:bd:7d:10:b1:f2:42:99:a4:ce:41:ad:1a:2d:e6:
f5:46:30:0a:51:6d:f9:b9:d0:ab:f9:90:18:37:93:
cc:f3:5d:40:96:89:dd:4b:1a:ee:a9:7d:ef:93:8a:
ed:10:5d:f5:e4:f5:19:72:ba:88:da:60:af:b8:da:
2e:90:4a:a5:73:89:7d:fc:76:de:71:95:bb:73:40:
01:15:da:d2:a9:4b:5e:4e:7f:c1:1e:13:cc:e0:1b:
4a:02:70:5a:e9:40:16:e3:b3:6a:c5:ce:93:07:5b:
d9:7b:ce:ac:33:de:9d:ab:a0:4d:d0:97:cc:16:86:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:79:A4:B9:8E:6F:55:A2:97:EA:A4:CB:F3:8E:76:21:0B:98:40
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gd55pLmOb1Wil-qky_OOdiELmEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.176.0/21
176.46.134.0/24
176.46.139.0/24
176.46.144.0/24
176.46.147.0-176.46.149.255
176.46.153.0-176.46.157.255
Signature Algorithm: sha256WithRSAEncryption
30:8c:2b:9f:50:ad:fb:61:4b:a2:6b:1b:d8:dd:e2:26:80:38:
0a:b0:4c:d1:b1:02:68:bb:35:d0:c2:c8:b4:87:6d:a3:55:4a:
43:35:09:da:74:e3:c2:6a:f3:3a:66:af:b1:6f:f8:7c:20:75:
c3:c7:78:f5:fd:44:5b:d9:b1:31:82:e7:6d:e4:db:45:34:3d:
16:4d:11:1f:58:39:e7:13:a6:2e:61:06:6d:03:af:5c:76:5d:
8d:01:7d:97:5a:55:5f:77:47:b6:cc:df:eb:80:a3:db:b0:fd:
a8:b4:15:34:59:0b:f3:1a:d5:a1:86:e4:82:65:be:55:9f:dd:
12:8f:67:25:8d:3d:a5:32:5b:40:87:7d:ee:0a:cd:31:f1:90:
85:8b:50:96:81:5e:90:a5:d5:cc:02:e9:8a:11:5e:28:96:46:
98:e4:c7:be:c5:8a:6c:c8:ec:50:e2:07:35:c3:f4:db:cb:dc:
2a:36:4d:de:bf:59:9d:6d:7a:ed:c1:43:f8:96:20:8e:ac:34:
21:de:00:96:c5:2f:23:11:ed:2f:e4:bd:a3:bf:19:0a:f9:09:
e5:41:8a:7b:41:43:a8:2b:6c:6a:60:28:e6:ce:be:2c:e9:a6:
19:0f:d5:5f:a9:0d:ff:69:89:16:e4:d5:0d:39:4a:6c:6c:52:
36:b0:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:58:18 2025 by rpki-client